repos are added by cm.dependencies